AWS solutions documentation change
Summary
Updated IAM role name from SO0111-SHARR-Orchestrator-Admin to SO0111-ASR-Orchestrator-Admin to reflect naming convention changes
Security assessment
Change appears to be a routine update to align with naming conventions rather than addressing a specific security vulnerability. No security weaknesses or incidents mentioned in the context.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/iam-roles.md b/solutions/latest/automated-security-response-on-aws/iam-roles.md index a7dfc1b3c..fb10a3b76 100644 --- a//solutions/latest/automated-security-response-on-aws/iam-roles.md +++ b//solutions/latest/automated-security-response-on-aws/iam-roles.md @@ -9 +9 @@ AWS Identity and Access Management (IAM) roles allow customers to assign granula -The admin account’s Step Function is assigned to the SO0111-SHARR-Orchestrator-Admin role. Only this role is allowed to assume the SO0111-Orchestrator-Member in each member account. The member role is allowed by each remediation role to pass it to the AWS Systems Manager service to run specific remediation runbooks. Remediation role names begin with SO0111, followed by a description matching the name of the remediation runbook. For example, SO0111-RemoveVPCDefaultSecurityGroupRules is the role for the ASR-RemoveVPCDefaultSecurityGroupRules remediation runbook. +The admin account’s Step Function is assigned to the SO0111-ASR-Orchestrator-Admin role. Only this role is allowed to assume the SO0111-Orchestrator-Member in each member account. The member role is allowed by each remediation role to pass it to the AWS Systems Manager service to run specific remediation runbooks. Remediation role names begin with SO0111, followed by a description matching the name of the remediation runbook. For example, SO0111-RemoveVPCDefaultSecurityGroupRules is the role for the ASR-RemoveVPCDefaultSecurityGroupRules remediation runbook.